CVE-2025-39600

Summary

CVE-2025-39600 is a Cross-Site Request Forgery (CSRF) vulnerability discovered in CRM Perks Integration for WooCommerce and QuickBooks. This issue allows malicious actors to execute unintended actions on affected WooCommerce sites through manipulated requests. A successful attack can result in unauthorized modifications to the targeted site's data or even lead to unauthorized data access. The vulnerability affects CRM Perks Integration for WooCommerce and QuickBooks versions from n/a through 1.3.1. It is crucial for WooCommerce site owners using this integration to apply the necessary patches or updates to mitigate this security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.